aws / aws/aws-toolkit-vscode

Amazon Q and SSL Interception not working in VSCode

Open
#7,407 2 comments 0 reactions 0 assignees View on GitHub
bug network
Dominant language
TypeScript
Stars
2k
Forks
807
Avg merge
10h 12m
Merged PRs (30d)
7

Description

## Problem
Hello,
I opened the exact same issue for IntelliJ last year and it seems that we have the same problem with VSCode.
I am trying to use Amazon Q in VSCode but it is not working with our SSL Interception activated.
My entreprise uses ZScaler and the root certificate is in my computer trust store but Q still get an error when I prompt it :

![Image](https://github.com/user-attachments/assets/14786434-813d-4b83-ad35-e951c5283fa9)

I try to change some settings in my VSCode like :
```
- http.proxyStrictSSL: false
- http.proxySupport: off
- http.experimental.systemCertificatesV2: true
- http.systemCertificates: (already true)
```
None of them change the problem.

It seems that Q uses it's own internal cert store.

## Steps to reproduce the issue
- Need : VSCode and Q extension
- Launch the interception soft (Zscaler for me)
- Try to query Amazon Q

## Expected behavior
Q should use the system certificate store.

## System details (run `AWS: About` and/or `Amazon Q: About`)

- OS: Windows 10 up to date
- Visual Studio Code version: 1.100.2
- AWS Toolkit version: 3.63
- Amazon Q version: 1.70

Contributor guide

Open the contributing guide

Research direction

Reproduce the issue with Windows 10, VSCode 1.100.2, AWS Toolkit 3.63, Amazon Q 1.70, and ZScaler SSL interception, using the listed certificate and proxy settings. Investigate how Amazon Q handles certificates and verify that prompts work with the system trust store; no repository files or tests are named in the issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript, vscode
Domain
devtools, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.